Skip to content
Threat Feed
Subscribe

Tag

Nuxt

2 briefs RSS
high advisory

Nuxt Ollama API Key Exposure via Public Runtime Configuration

The nuxt-ollama module version 1.2.26 inadvertently publishes Ollama cloud API keys in the client-side serialized runtime configuration, allowing unauthorized remote extraction via standard HTTP requests.

nuxt-ollama credential-exposure nuxt ollama misconfiguration
1t
high advisory

Nuxt 4.x Runtime Payload Cache Disclosure

A vulnerability in Nuxt 4.4.0 through 4.5.0 causes sensitive SSR data in the payload cache to be disclosed to unauthorized users due to an insufficient cache key implementation.

Nuxt +4 remote-code-execution template-injection cve-2026-71320
2r 3t updated